Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (872)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (517)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (366)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-12681 |
high | 8.9 | 0.0027 | 2026-06-24 | Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Google go-atte | |
CVE-2024-36342 |
high | 8.8 | 0.0017 | 2025-09-06 | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow poten | |
CVE-2026-18485 |
high | 8.5 | 0.0017 | 2026-08-05 | There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. | |
CVE-2026-14479 |
medium | 5.5 | 0.0015 | 2026-08-12 | A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger | |
CVE-2026-89410 |
medium | 5.1 | 0.0018 | 2026-10-22 | In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that le | |
CVE-2026-33557 |
— | — | 0.0090 | 2026-04-20 | A possible security vulnerability has been identified in Apache Kafka. By default, the broker prope | |
CVE-2026-40886 |
— | — | 0.0038 | 2026-04-23 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on | |
CVE-2026-43868 |
— | — | 0.0071 | 2026-05-05 | Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apac | |
CVE-2026-44004 |
— | — | 0.0042 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, sandboxed code can call Buffer.alloc( |